This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
File:                     34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json)
Hash identifier:          r3RDJCYmsmc88vFrnQienXTws8iaJvTFZ8SYdSfelYM=
Subject key identifier:   88:C1:84:31:37:D4:15:33:F3:EF:84:D0:78:E9:70:6F:87:73:18:FC
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Certificate issuer:       /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial:       13A8F83EDD1C8E3C4B64D01FA17273F400B1994B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
Manifest number:          07D2
Signing time:             Sat 06 Dec 2025 06:27:54 +0000
Manifest this update:     Sat 06 Dec 2025 06:22:54 +0000
Manifest next update:     Sun 07 Dec 2025 07:07:54 +0000
Files and hashes:         1: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: SPVnXgzc6DdCcPNaKseycoy7ZTTw0qv3w3c7rqopVw0=)
                          2: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: pZv8WRdNlBV4IKDx6bNv7oBg2N/5UFROImiToIit/aA=)
                          3: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: cLW/biMRwR7zRrRPFacawZTNPUq9jmMexiFzyeHhVJ4=)
                          4: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: lWIr6sYh7jORalo3knn4O8Tkqys/QMzZOqOsz0HK/gg=)
                          5: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: hJxx3nr/lfwP0kEgV9nZ8LhD9nuKvmRGXnwzZAzg9w0=)
                          6: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: cDTbMfGHTly+QeOfyQG+o4pg0zroCRCYVzgE6JjA/GY=)
                          7: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: DNK4vnrgAUMBFTQF62of1cSQgwMSTE8r5u7W1r1aQzI=)
                          8: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=)
                          9: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: tXrN0zoKF82QapDtfGgfQ/sKCgpFN3PcfxbF24KevGM=)
                          10: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: VZm+1A419bpjhNHk7oa8SlaXnBnjm4UoiyMj6yzbhMQ=)
                          11: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 5rh5xKoFim9+qzXuz9ue2E9gTTOhHmo70qMX7Q8lZTQ=)
                          12: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: enaySFUpt7HUACHfd9TuXH57K0gEe6gPHzhcz9XFJXs=)
                          13: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: Y8e4qsDNa3SYUFFsOcSiwu0tSsNf2u5aFvnQyaGgi0E=)
Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
                          rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 07:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a8:f8:3e:dd:1c:8e:3c:4b:64:d0:1f:a1:72:73:f4:00:b1:99:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
        Validity
            Not Before: Dec  6 06:22:54 2025 GMT
            Not After : Dec  7 07:07:54 2025 GMT
        Subject: CN=88C1843137D41533F3EF84D078E9706F877318FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:5a:b1:73:19:8a:fa:76:ff:41:6a:a8:91:
                    19:aa:50:10:ca:25:b4:08:9c:74:3a:3d:d4:c5:46:
                    9f:e2:43:31:04:b5:18:98:f3:0e:ab:95:d7:6c:ef:
                    3c:41:e7:7e:19:21:d7:f8:de:dc:1f:28:b1:9d:98:
                    48:e4:d3:0e:a7:ee:b7:9b:d7:f9:dd:c2:50:b4:af:
                    a8:28:e1:86:45:8b:70:fa:53:ef:e6:f6:68:b7:0f:
                    d1:33:3a:4b:40:02:3b:05:7f:d2:e3:a4:1b:66:f3:
                    f9:51:46:89:1f:ab:5f:38:d1:3f:a1:92:dc:b8:d4:
                    ba:6a:3a:8e:84:60:0b:3d:63:8a:99:e3:75:d3:e8:
                    2b:04:20:af:44:7a:65:ab:8d:d0:37:52:e5:c9:1c:
                    6b:ba:a3:82:a3:06:09:4f:ae:99:6c:da:88:4a:57:
                    ef:05:ce:dd:ff:31:f8:2e:5b:22:84:ef:25:7d:23:
                    62:83:70:19:ce:29:de:a4:b3:00:71:65:9b:e1:d0:
                    f4:f9:58:b9:b8:24:09:88:f7:86:6d:07:6d:2c:a5:
                    ae:7f:cf:e2:7c:ac:46:72:ed:0f:96:a3:8f:9a:46:
                    f5:3e:45:db:3c:7d:00:bc:6d:a2:66:27:5e:63:07:
                    52:a8:9c:ea:61:ef:ae:69:cc:45:84:91:51:31:11:
                    fa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C1:84:31:37:D4:15:33:F3:EF:84:D0:78:E9:70:6F:87:73:18:FC
            X509v3 Authority Key Identifier:
                keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:67:f0:3f:1a:49:c1:4f:14:33:89:c8:93:63:cd:7b:12:60:
         d3:55:a9:69:fe:eb:89:b2:a2:bf:8d:4a:b5:e6:fb:79:af:40:
         2c:e7:d3:8e:48:6e:2e:c1:93:8f:a3:c3:9f:cf:9a:80:a2:6f:
         3c:35:b6:9b:f0:57:1c:8e:52:a5:3d:30:9b:bc:73:db:a2:98:
         a8:41:d1:01:b4:8b:0d:31:a5:8b:e1:3c:21:77:17:30:e0:84:
         86:43:c8:83:12:10:10:bb:ac:f2:99:0c:96:e3:db:bf:32:de:
         4c:1a:79:87:74:24:e9:70:e6:5c:20:44:68:a2:2b:cd:d9:ac:
         24:23:1c:3e:21:08:0a:fd:82:14:6a:c7:0e:0d:f6:eb:ea:e3:
         d1:36:ed:f3:77:55:5d:56:29:0a:db:5d:ae:c7:5d:52:2b:23:
         95:71:a1:eb:ea:17:03:ee:70:28:22:fe:21:ac:a5:00:94:74:
         2b:dc:04:1a:9b:5a:50:0d:25:48:62:b0:d2:1b:56:75:d3:dc:
         35:12:80:90:44:0d:81:f5:20:bd:d0:88:29:e3:c6:d0:8b:a7:
         e2:5f:b1:2d:54:5f:4a:ce:de:ab:7e:d1:a6:4f:fe:42:01:9c:
         b1:76:e0:5a:f0:5d:ef:a8:e5:d8:83:9c:c1:43:1f:96:45:1a:
         a8:44:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:41:22 2025 by rpki-client